CVE-2025-63228

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /upload_file.php endpoint. An attacker can exploit this by sending a crafted POST request with a malicious file (e.g., a PHP webshell) to the server. The uploaded file is stored in the /upload/ directory, enabling remote code execution and full system compromise.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CISA-ADPADP
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 65%
VendorProductVersion
dbbroadcastmozart_next_100_firmware
-
dbbroadcastmozart_next_1000_firmware
-
dbbroadcastmozart_next_2000_firmware
-
dbbroadcastmozart_next_30_firmware
-
dbbroadcastmozart_next_300_firmware
-
dbbroadcastmozart_next_3000_firmware
-
dbbroadcastmozart_next_3500_firmware
-
dbbroadcastmozart_next_50_firmware
-
dbbroadcastmozart_next_500_firmware
-
dbbroadcastmozart_next_6000_firmware
-
dbbroadcastmozart_next_7000_firmware
-
dbbroadcastmozart_dds_next_30_firmware
-
dbbroadcastmozart_dds_next_50_firmware
-
dbbroadcastmozart_dds_next_100_firmware
-
dbbroadcastmozart_dds_next_300_firmware
-
dbbroadcastmozart_dds_next_500_firmware
-
dbbroadcastmozart_dds_next_1000_firmware
-
dbbroadcastmozart_dds_next_2000_firmware
-
dbbroadcastmozart_dds_next_3000_firmware
-
dbbroadcastmozart_dds_next_3500_firmware
-
dbbroadcastmozart_dds_next_6000_firmware
-
dbbroadcastmozart_dds_next_7000_firmware
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63228_Mozart_FM_Transmitter_Unauthenticated_File_Upload
https://www.dbbroadcast.com/